By entering this site you need to consent to the use of cookies and their functional use according to this privacy policy. Cookies help us to provide the functional services of the website. Kindly read the below message of use and consent to the use.
The following cookies are stored and shared when accessing this website:
- Internal cookies for the MediaWiki site. This is used for user authentication and article modifications.
- Third-party cookies from Google providing services for Google AdSense and Google Analytics
We will never use data collected outside of the above scope.
| Available(normally not accessible due to SVC-access-control).
| Available(normally not accessible due to SVC-access-control).
| No
| No
−
| Backdoor(unsigned int CodeAddress) This calls the specified code in SVC-mode. This is used/accessible by [[FIRM|Process9]].
+
| Backdoor(unsigned int CodeAddress) This is used/accessible by [[FIRM|Process9]].
|-
|-
| 0x7C
| 0x7C
Line 882:
Line 882:
u32 hmm?[2];
u32 hmm?[2];
}
}
+
+
= SVC7B Backdoor =
+
This saves SVC-mode SP+LR on the user-mode stack, then sets the SVC-mode SP to the user-mode SP. This then calls the specified code in SVC-mode. Once the called code returns, this pops the saved SP+LR off the stack for restoring the SVC-mode SP, then returns from the svc7b handler. Note that this svc7b handler does not disable IRQs, if any IRQs/context-switches occur while the SVC-mode SP is set to the user-mode one here, the ARM11-kernel will crash(which hangs the whole ARM11-side system).